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(54) Apparatus and method for authentication and method for registering a person 



(57) Wrongful authentication process is prevented. 
A passive entry authenticating section compares an 
identification signal sent from a portable unit with an 
identification signal previously stored in a storage sec- 
tion. A biometrics authenticating section compares the 
biometrics information of a user inputted through a sen- 



sor section with the biometrics Infomriation registered in 
a biometrics database. A control section authenticates 
an authorized user when there is agreement in both the 
identification-signal comparison result and the biomet- 
rics-Information comparison result, and controls a lock 
system to unlock the door lock of the automobile. 



FIG. 3 (a) 
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Description 

BACKGROUND OF THE INVENTION 
' Field of the Invention 

[0001] The present invention relates to an apparatus 
and method for authentication having means to prevent 
against wrongful authenticating process, and to a meth- 
od for registering a person to an authenticating appara- 
tus or appliance using such an authenticating method. 

2. Description of the Related Art 

[0002] There is generally, as a scheme for use in the 
door lock of an automobile, a widespread of a door lock 
scheme called, what is called, a smart entry scheme, 
wherein a user carries a portable unit in a key-folder 
form to cause unlocking according to an identification 
signal issued from the portable unit when the user 
comes nearby the automobile. 

[0003] Fig. 1 is a diagram explaining a lock system of 
a conventional smart entry scheme. An automobile 1 
has a control section 11 which is, what is called, a mi- 
crocomputer configured with a CPU (Central Process- 
ing Unit), a RAM (Random Access Memory) and a ROM 
(Read Only Memory). The CPU expands the program 
stored in the ROM onto the RAM and executes it to con- 
trol the overall operation of the automobile 1 . Note that 
Fig. 1 shows only a configuration for mainly controlling 
the automobile 1 , omitting the showing, for example, of 
a drive system and the like. 

[0004] A lock system 1 2, under control of the control 
section 1 1 , manages to unlock and lock the door lock of 
the automobile. A passive entry authenticating section 
1 3 transmits an inquiry signal to a portable unit 2 through 
a communicating section 15, and compares between 
the corresponding identiffcatlon signal 33a from the 
portable unit 2 and the identification signal 14a previ- 
ously stored in a storage section 1 4 to output a compar- 
ison result to the control section 11 . 
[0005] The control section 31 of the portable unit 2 is, 
what is called, a microcomputer configured with a CPU, 
a ROM and a RAM, so that the CPU expands the pro^ 
gram stored in the ROM onto the RAM and executes It 
thereby controlling the overall operation of the portable 
unit 2. The control section 31 controls the communicat- 
ing section 32 to transmit an Identification signal 33a 
previously stored in a memory 33 correspondingly to an 
inquiry signal sent from the automobile 1. 
[0006] Next, explanation will be made on the opera- 
tion of the smart entry system of Fig. 1 . 
[0007] The control section 11 controls the communi- 
cating section 15 to detect the portable unit 2 when ap- 
proaching to within a distance, and controls the passive 
entry authentk:ating section 1 3 to transmit an inquiry sig- 
nal through the communicating section 15 to the porta- 
ble unit 2. The control section 31 of the portable unit 2, 



receiving the inquiry signal, from the automobile 1 
through a communicating section 32, reads out an iden- 
tification signal 33a previously stored in the memory 33 
and transmits It to the automobile 1 by controlling the 

5 communicating section 32. 

[0008] The control section 11 of the automobile 1, 
when recognizing a reception of the identification signal 
33a through the communicating section 15, causes it to 
output same to the passive entry authenticating section 

10 13. The passive entry authenticating section 13 com- 
pares between the identif cation signal 33a transmitted 
from the portable unit 1 2 and the identification signal 14a 
previously stored in the storage section 14. to output a 
comparison result to the control section 11. For exam- 

^5 pie, in the case of an agreement in the comparison re- 
sult, the user carrying the portable unit 12 is considered 
as an authorized user of the automobile 1 .Thus, the lock 
system 12 is controlled for unlocking. Meanwhile, in the 
case of a disagreement in the comparison result, the us- 

^0 er carrying the portable unit 12 is considered as not an 
authorized user of the automobile 1 so that the locked 
state is maintained without operating the lock system 
12. 

[0009] Thus, according to the smart entry system, the 

25 authorized user carrying the portable unit 1 2, if nears to 
within a constant distance of the automobile 1 , is al- 
lowed to unlock without being conscious of an unlocking 
operation of the door lock. The locked state can be main- 
tained against an unauthorized user 

30 [0010] In the smart entry system, however, there is a 
fear of unlocking by an unauthorized user who is not the 
owner of the automobile 1 by stealing an inquiry signal 
and identification signal of the automobile 1 and portable 
unit 2 according a method called relay team attack. 

35 [0011] Relay team attack is carried out by two unau- 
thorized users A, B in combination respectively carrying 
repeaters 51 , 52, wherein one of them approaches the 
automobile 1 while the other is nearby an authorized us- 
er as shown in Fig. 2. The repeaters 51 . 52 respectively 

^0 have communicating sections 72, 82 to be controlled by 
control sections 71, 81, to wrongfully transmit and re- 
ceive inquiry and Identifteation signals when operating 
sections 73, 83 are operated. 

[0012] Namely, the unauthorized user A carrying the 
^5 repeater 51 goes near (to a close distance to) the auto- 
mobile 1 whereby the passive entry authenticating sec- 
tion 13 of the automobile 1 transmits an inquiry signal 
through the communicating section 15. The repeater 51 
relays the inquiry signal to transmit it to the repeater 52 
50 earned by the unauthorized user B who is nearby (in a 
close distance to) the authorized user distant (distant by 
nearly a middle or long distance greater than a distance 
at which the usual automobile 1 can detect the portable 
unit 2) from the automobile 1 . 
55 [0013] The repeater 52 relays the inquiry signal trans- 
mitted from the repeater 51 to transmit it onto the port- 
able unit 2. Thereupon, the portable unit 2 transmits an 
identification signal 33a as If approaching the automo- 
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bile 1 . The repeater 52 relays the identifbation signal 
33a and transmits It to the repeater 51 . The repeater 51 
repeats the identification signal 33a transmitted from the 
repeater 52 to send it onto the automobile 1 . 
[0014] The passive entry authenticating section 13 of 
the automobile 1 compares between the identification 
signal 33a relayed from the repeater 51 and the identi- 
fication signal 14a previously stored in the storage sec- 
tion 14, to output a comparison result to the control sec- 
tion 11 . At this time, because the identification signal 33a 
is the one transmitted from the portable unit 2 pos- 
sessed by the authorized user, the comparison result 
results in agreement. 

[0015] Consequently, despite the one who Is ap- 
proaching the automobile 1 is the unauthorized user A 
while the authorized user is distant from the automobile 
1 , the control section 11 controls the lock system to un- 
lock the lock of the automobile 1 . 
[0016] As a result, the unauthorized users A, B can 
unlock the lock of the automobile 1 v/ithout being aware 
of by the authorized user, by respectively carrying the 
repeater 51 , 52 to approach the automobile 1 and au- 
thorized user. 

[0017] In this manner, there has been a problem that 
a wrongful authentication process is carried out by the 
relay team attack method to illegitimately unlock the 
door lock of an automobile. 

[0018] The present invention has been made In view 
of such a circumstance, which makes it possible to pre- 
vent against the wrongful use of a smart entry system. 

SUMMARY OF THE INVENTION' 

[0019] An apparatus and method of authentication of 
the present invention authenticates as to whether there 
is an agreement between the identification signal of a 
portable unit transmitted from the portable unit (e.g. re- 
mote-control transmitter in a keyless entry system of an 
automobile) and the identification signal stored in an au- 
thenticating apparatus main body (to be considered in 
a form, e.g., incorporated in an automobile). On the oth- 
er hand, inputted biometrics information (fingerprint, fa- 
cial image, voiceprint, retina pattem or physlgnomy) is 
compared with previously stored biometrics Inf onnation, 
to carry out personal authentk^ation as well. Two authen- 
tication results, if each in agreement, are rendered a fi- 
nal authentication. 

[0020] Due to this, double checking is made with the 
authentication due to portable-unit identification and the 
authentication due to biometrics information, thus posl- 
tivety preventing a wrongful authentk^ation process. 
[0021] Meanwhile, in a preferred ennbodiment, when 
storing biometrics infonmation, it is stored with con-e- 
spondence to a personal authenticating number. When 
transmitting an identification number from the portable 
unit, a personal identification number incorporated in the 
portable unit is also transmitted simultaneously. In a per- 
sonal authentication, the biometrics Information corre- 



sponding to the received personal identification number 
is invoked and compared with the input biometrics infor- 
mation. 

[0022] Explanation will be further made on an effect 

5 of the present embodiment in the case that an authen- 
ticating apparatus having a personal authenticating 
function is mounted on an automobile. The automobile 
at its inside is often at high temperature. In order to nor- 
mally operate the authent^ating apparatus mounted on 

10 the automobile, there is a need for an operation process- 
ing unit (CPU) incorporated in the authenticating appa- 
ratus to have a constant heat resistance. However, the 
CPU having a constant heat resistance is not so high in 
processing speed. Due to the experiment by the present 

15 inventors, obtained is, as one example, a result that it 
takes 1 .5 seconds in one collating process of between 
one of inputted fingerprint data and one of previously 
stored fingerprint data. Furthemnore, If considering a 
case that the fingerprint data on four fingers is stored as 

20 the data on one person and compared with one of in- 
putted fingerprint data thereby carrying out an authen- 
ticating process, the mere collation/authentication with 
the data on one person takes 4 times 1 .5 seconds, i.e. 
6 seconds, in calculation. 

25 [0023] Accordingly, it is of importance, in an authen- 
ticating process in a site requiring heat resistance for 
the authenticating apparatus, partbularly an automo- 
bile, to make a certain selection from among previously 
stored biometrics information thereby carrying out a per- 

30 sonal authentication process. The present embodiment 
is practical freely from a prolonged authenticating proc- 
ess, because of selection due to a received personal 
identification number. 

[0024] In a further preferred embodiment, personal 
35 identification number is classified with first and second 
kinds. A first-kind personal identification number Is to 
identify an owner of an automobile Incorporating, for ex- 
ample, an identifying device. A second-kind personal 
identification number is to identify a user of other than 
40 the owner who drives the automobile. On that basis, in 
order to register a person (user other than the owner) 
Identified by the second-kind personal identification 
number, there is a need that the person identified by the 
tirst-kind personal identification number has been pre- 
45 viously registered and the biometrics information on that 
person has been authenticated. 

[0025] Due to this, the person to be identified by the 
first-kind personal identification number can prevent 
against a user registration the same person is not con- 

50 cemed with, thus further enhancing the effect to prevent 
against wrongful authenticating processes. 
[0026] In a further prefen^ed embodiment, when a per- 
son identified by a first-kind personal identification 
number has been newly registered, deleted are all the 

55 already stored second-kind personal identif k:ation*num- 
bers and the corresponding biometrics information. 
[0027] Due to this, when a person to be identified by 
the first-kind personal identification number, e.g. the 
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owner of the automobile incorporating the identifying ap- 
paratus, is changed and newly registered, the user the 
fomner automobile owner has permitted user registra- 
tion Is not allowed to drive the automobile. Thus, the au- 
tomobile can be prevented from being wrongfully stolen. 

BRIEF DESCRIPTION OF THE DRAWINGS 

[0028] 

Fig. 1 1s a diagram showing a configuration of a con- 
ventional smart entry system; 
Fig. 2 is a diagram showing a configuration of an 
embodiment of a semiconductor device to which the 
present invention is applied; 
Fig. 3 is a diagram showing a smart entry system 
to which the present invention is applied; 
Fig. 4 is a figure showing a relationship between a 
PIN and biometrics information; 
Fig. 5 is a flowchart explaining a biometrics, infor- 
mation registering process; 
Fig. 6 is a flowchart explaining an entry process; 
Fig. 7 is a flowchart explaining an engine-lock un- 
locking process; 

Fig. 8 is a diagram explaining on an example having 
a control section of an automobile configured by a 
personal computer; and 

Fig. 9 is a diagram explaining on an example having 
a portable unit configured by a personal computer. 

DETAILED DESCRIPTION OF THE PREFERRED 
EMBODIMENT 

[0029] Rg. 3 Is a diagram showing an embodiment 
configuration of a smart entry system according to the 
present invention. Note that, in Fig. 3 and the subse- 
quent, the elements corresponding to those in the fig- 
ures on the related art are attached with the same ref- 
erences to conveniently omit the explanations thereof. 
Meanwhile, in this embodiment, biometrics information 
refers to fingerprints. 

[0030] In the configuration of an automobile 1 of Rg. 
3, the configuration different from the related art auto- 
mobile of Rg. 1 lies in that there are provided a sensor 
section 101, an input section 102. a biometrics authen- 
ticating section 1 03, a biometrics database 104, a stor- 
age section 1 05, an engine immobilizer 106 and a stor- 
age section 107. Also, a control section 11 Incoiporates 
therein a not-shown timer. In the control with time meas- 
urement, the timer is operated to assist the control. 
[0031] A sensor section 101 is under control of the 
control sec^on 11. When instructed for operation, this 
requests a user to input biometrics infonmation through 
a not-shown speaker or the like. In case biometrics in- 
fomriation of an authorized user is inputted, the informa- 55 
tlon is converted into digital information and outputted 
to the biometrics authenticating section 103. Because 
the biometrics information herein Is a fingerprint, the 



sensor section 101 uses a fingerprint input device incor- 
porating a CCD (Charge Coupled Device) or the like. In 
this case, the sensor section 1 01 can be set up at the 
outside of the vehicle. However, the provision on a com- 
5 partment dashboard in front of the driver* s seat will pro- 
vides convenience in use. 

[0032] An input section 1 02 is operated when the user 
is to cany out a predetermined process. This outputs a 
signal in accordance with an operation to the control 
10 section 1 1 . This may be concretely configured with tab- 
let buttons, a keyboard orthe like, but can be configured, 
for example, with a mode change switch 102a, ten keys 
102b and a card reader 102c as shown in Fig. 3B. 
[0033] The mode change switch 1 02a is to switch be- 
'5 tween an authentication mode to authenticate a user 
and lock or unlock a lock system 12, and a registration 
mode to register biometrics information, such as finger- 
prints. The ten keys 102b are to input numerals, such 
as numbers. The card reader 1 02c is to receive a secret 
^0 card required for initially registering a vehicular owner 
and read in-card data. The secret card is printed, on a 
surface, with an initialize code number for owner's initial 
registration. This is receded also as magnetic data. 
However, there exist secret cards having only one of 
^5 printing and data recording. 

[0034] Incidentally, the input section 1 02 may be pro- 
vided at anywhere within the vehfcle. However, it will be 
convenient in use to provide it, side by side, with the 
sensor section 101 on the compartment dashboard in 
30 front of the driver's seat. 

[0035] The biometrics authenticating section 103 
stores to the biometrics database 1 04 the biometrics in- 
formation of an authorized user inputted to the sensor 
section 101 upon registration. When authenticating the 
user, this biometrics infomnation is compared with the 
biometrics information inputted through the sensor sec- 
tion 1 01 . A result of comparison is outputted to the con- 
trol section 11. Meanwhile, the biometrics authenticating 
section 103, upon registering biometrics information, 
sets and registers a PIN (Personal Identifier Number: 
identification number of biometrics infomnation) as cor- ' 
responding digital infomnation, and further encrypts this 
PIN and sends it through a communicating section 15 
to a portable unit 2 possessed by each authorized user. 
This encrypted PIN is stored with correspondence to the 
biometrics Infonnatlon, as shown in Fig. 4. 
[0036] There are various forms of storing the PIN and 
biometrics information with correspondence. Because 
the biometrics information in this embodiment is a fin- 
gerprint, storage is made with correspondence between 
one PIN and the biometrics information on four fingers, 
as shown in Fig. 4. This is because of a preparation for 
a case that one to two fingers are dirty or wound and not 
suited in fingerprint recognition. However, it is of course 
possible to store one PIN with correspondence to 1 - 3 
or 5 or more pieces of biometrics Infomnation. 
[0037] Meanwhile, the PIN of a vehicular owner (own- 
er PIN) is assumably distinguished from the PINs of the 
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other users (user PIN). The vehicular owner possesses 
a strong authority, e.g. the other user who Is to register 
requires a permission (authentication) of the owner. 
[0038] Many approaches can be considered for the 
distinguishment between the owner PIN and the user 5 
PIN. There Is included an approach, as one example, 
that four figures are provided to the PIN so that, for the 
owner PIN, 1 is given to the first-order figure and, for the 
user PIN, 2 is given to the first-order figure. Note that, 
in each PIN, the lower three figures are generated by io 
the use of random numbers or the like. 
[0039] During authentication, when an encrypted PIN 
is transmitted together with biometrics information from 
the portable unit 2, the biometrics authenticating section • 
103 compares between the biometrics Information cor- ^5 
respondlngto the PIN and the biometrics information In- 
putted to the sensor section 101. By this process, the 
biometrics authenticating section 103 can avoid from a 
comparison process between the inputted biometrics In- 
formation and a plurality of pieces of biometrics infor- 20 
mation previously stored In the biometrics database 
1 04. Because it Is satisfactory to execute only the com- 
parison process necessitated in authentication, authen- 
tication process rate can be increased. 
[0040] The storage section 1 05 is stored with keyless 25 
entry IDs 105a previously registered based on each 
portable unit 2. The keyless entry ID 105a is used in 
pushing to release door lock of an automobile 1 by a 
user not registered with biometrics Infomnation but bor- 
rowed a portable unit 2 from an authorized user. The 30 
lock system 12 compares a keyless entry ID 33c trans- 
mitted upon pushing the keyless entry button 1 21 on the 
portable unit 2 with the previously registered keyless en- 
try ID 1 05a. When the both are in agreement, the control 
section 11 controls the lock system 12 to release the 35 
door lock. 

[0041] The engine immobilizer 1 06 compares an im- 
mobilizer ID 33d previously stored in a memory 33 trans- 
mitted by the portable unit 2 with an immobilizer ID 1 07a 
stored In the storage section 1 07, to control engine-ig- 40 
nition on/off (engine lock) depending on agreement or 
not. When the engine Immobilizer 106 controls the en- 
gine to on, In case an operation is made to start up the 
engine of the automobile 1 , control is made to electri- 
cally start up the engine. When controlled off, the engine 45 
Is controlled Into a state not to be electrically started up. 
Consequently, should an unauthorized usercoukJ have 
wrongfully operated the lock system 1 2 and intruded into 
the automobile 1 , the engine cannot be started up un- 
less the engine immobilizer 1 06 is operated on (releas- so 
ing the engine lock). 

[0042] Now, the portable unit 2 will be explained. 
[0043] Comparing with the portable unit 2 of- Fig. 1, 
the portable unit 2 the invention is applied is previously 
stored with a PIN 33b, an immobilizer ID 33d and a key- 55 
less entry ID 33c in the memory 33. Furthermore, a key- 
less entry button 121 Is provided. 
[0044] In case biometrics information is registered in 



the automobile 1 as mentioned above, a PIN 33b is re- 
ceived In an encrypted state and stored to the memory 
33. It is assumed herein that an owner PIN on one per- 
son and a user PIN on one person can be inputted to 
and stored in one portable unit. It is defined that there 
is one owner for one vehble to allow for storage of an 
owner PIN on one person only. However, specification 
may be made such that, concerning the user PIN, the 
storage capacity of the memory 33 is increased to store 
a user PIN on two or more persons. 
[0045] The keyless entry ID 33c and immobilizer ID 
33d is stored during manufacture, together with the key- 
less entry ID 105a stored in the storage section 105 of 
the automobile 1 and the immobilizer ID 1 07a stored in 
the storage section 107. Note that the immobilizer ID 
33d. the keyless ID 33c, the keyless entry ID 1 05a and 
the immobilizer ID 1 07a may be provided changeable in 
setting as required. 

[0046] Explanation will now be made on a biometrics 
Information registering process with reference to a flow- 
chart of Figs. 5A to SC. 

[0047] In step SI of Fig. 5A, the control section 11 of 
the automobile 1 detennines whether the mode change 
switch 102a is In a registration mode or not. If in a reg- 
istration mode, the process proceeds to step S2. If not, 
this determination is repeated at a constant time inter- 
val. 

[0048] In step S2, the control section 11 controls the 
passive entry authenticating section 13 and communi- 
cating section 1 5 to transmit a registratioh Inquiry signal 
to the portable unit 2. 

[0049] In step S1 1 , the control section 31 of the port- 
able unit 2 controls the communicating section 32 to de- 
termine whether a registering inquiry signal has been 
received or not. If having receh^ed, the process pro- 
ceeds to step S22. If not received, this detemrilnation is 
repeated at a constant time interval. 
[0050] In step SI 2, the control section 31 controls the 
communicating section 32 to transmit an identification 
signal 33a of the portable unit to the automobile 1 . 
[0051] In step S3, the control section 11 controls the 
communteating section 15 to determine whether an 
identification signal of the portable unit has been re- 
ceived or not. If having received, then the passive entry 
authenticating section 13 is controlled to determine 
whether the received portable-unit Identification signal 
33a agrees with the identification signal 14a previously 
stored in the storage section 14 or not. If in agreement, 
the process proceeds to step S4. Unless, in step S2, a 
signal in agreement with the identification signal 14a Is 
received within a predetermined time from th e transmis- 
sion of an inquiry signal, the process is ended. 
[0052] In step 84, the control section 11 makes refer- 
ence to the biometrics database 1 04 to confirm whether 
automobile owner data has already been registered or 
not. If already registered, the process proceeds to step 
S5, while not registered the process jumps to (A1). 
[0053] In step S5. inputting is prompted whether to 



5 



BNSDCaCIDe <EP 12Be297Al J_> 



9 



EP 1 286 297 A1 



10 



make an owner registration or a user registration. Spe- 
cifically, an instruction is issued to press "1" of the ten 
key 1 02b for owner registration and to press "2" for user 
registration through a not-shown speaker. 
[0054] In step S6, It is determined whether or not ten 
key "1" has been pressed within a constant time from 
issuing the instruction. When "1 " has been pressed, the 
process jumps to (A1). When not pressed, the process 
proceeds to step S7. 

[0055] In step S7, it is determined whether or not ten 
key "2" has been pressed within a constant time from 
Issuing the instruction. When "2" has been pressed, the 
process proceeds to (A2). If not, the process Is ended. 
[0056] Fig. 5(b) Is a flowchart in making an owner reg- 
istration. 

[0057] In step S21, inpuned is an initialize code 
number of a secret card. Inputting may be by Inserting 
the secret card in a card reader 1 02c in order for reading. 
Otherwise, the initialize code number written on a sur- 
face of the secret card may be Inputted by the ten kev 
102b. 

[0058] In step S22, detemnlnatlon is made whether 
the inputted initialize cord number is correct or not. Spe- 
cifically, reference Is made to an Initialize cord number 
recording section, not shown, within the automobile, to 
collate it with the input number by the control section 1 1 . 
If the both numbers are In agreement, the process pro- 
ceeds to step S23. If not in agreement, the process Is 
ended. 

[0059] In step S23. i is rendered as an initial value 1 , 
In step 824, confimiation is made whether 3 minutes 
has elapsed from a start of registration. When 3 minutes 
have elapsed, the process is ended. If not yet, the proc- 
ess proceeds to step S25. Note that 3 minutes are a 
value to give a limitation to a time required in registering 
four fingers of biometrics infomnation (fingerprints). The 
value may be properly designated without limited to 3 
minutes. 

[0060] In step S25, registration is made on the i-th fin- 
ger of biometrics infomiation. Because the initial value 
is i = 1 . registration Is started at the first finger. The de- 
tailed operation of registration is to put a fingerprint of 
the finger onto the sensor section 101 and then read it 
out. Note that at which finger registration is to start is at 
registering owner's will. 

[0061] In step 826. confinnatlon is made whether bi- 
ometrics information has been normally read or not. If 
nomially read, the process proceeds to step S27. If not, 
the process returns to the step 825 where reading is 
again made. 

[0062] In step 827, the value j Is incremented by 1 . If 
in a state that biometrics information registration is end- 
ed on the first finger (i=1), \ is incremented by 1 to 2. 
Next, biometrics infomiation registration will be made on 
the second finger. Considering simllarty, if biometrics 
registration has ended on four fingers (i = 4), j = 5 is 
given in this step 827. 

[0063] In step 828. detemnination is made whether or 



not j is 5 or greater. If biometrics information registration 
on four fingers has completed to render i = 5. the proc- 
ess proceeds to step 829. If not, it is represented that 
registration of four fingers has not yet completed, and 
5 then the process returns to step 824. 

[0064] In step 829. an owner PIN is generatedto store 
the owner PIN and biometrics information on four fingers 
into the biometrics database 1 04. 
[0065] In step 830, the owner PIN is encrypted and 
10 then sent to the portable unit. Then, in step 831. the 
portable unit receives the encrypted owner PIN and 
stores it in the memory 33. 

[0066] Incidentally, in case an owner registration is 
newly made to generate a new owner PIN. the other us- 
^5 er registration contents (set of user PIN and fingerprint 
data) are all deleted. 

[0067] Fig. 5C is a flowchart upon user registration. 
[0068] In step 8201 , the biometrics database 104 is 
examined to confimi whether an additional user regis- 
tratlon is possible for the portable unit 2 or not. This em- 
bodiment can register a user PIN on one person with 
the portable unit 2. However, in case a one-person user 
PIN has been registered, additional registration cannot 
be done, 

25 [0069] If in a state an additional user registration is 
possible, the process proceeds to step 8202. If not, the 
process is ended. Incidentally, when the process is end- 
ed herein, a notice can be given to the operator e.g. by 
issuing a speech through a not-shown speaker "user 
30 registration is no longer possible. Delete the existing us- 
er registrations and then register." 
[0070] In step 8202, an owner authentication is made 
for user registration. Owner authentication Is to certify 
that a user' s new registration is consented with the own- 
35 er. In the detailed procedure, the owner's finger is put 
on the sensor section 101 to allow a user registration in 
case the input fingerprint is recognized as the one of an 
owner previously registered in the biometrics database 
104. 

40 [0071] In step 8203. confirmation is made whether 
owner authentication could have been made or not. If 
could have been authenticated, the process moves to 
step 8204. If not the process is ended. 
[0072] The steps 8204 to S209 are similar to the steps 
<5 823 to 828 In the owner registration procedure of Fig. 
5B. The user* s four Hngers of biometrics information are 
sequentially registered. When the four fingers have 
been registered, the process can proceed to step 821 0. 
[0073] In step 210. a user PIN is generated to store 
50 the user PIN and biometrics Infomnation of four fingers 
to the biometrics database 1 04. 

[0074] In step 8211, the user PIN is encrypted and 
then sent to the portable unit. Then, in step S212, the 
portable unit receives the encrypted user PIN and stores 
55 ft in the memory 33. 

[0075] Incidentally, it is possible to separately define 
a procedure to delete the existing user registrations (set 
of user PIN and biometrics infonmation of four fingers). 
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In one example, in a state the mode change switch 1 02a 
is in a registration mode, "0" of the ten key 102b is 
pressed twice. Next, owner authentication is made in the 
procedure similarto the steps S202 and S203. If authen- 
tication can be made, then "9" of the ten key 1 02b is 
pressed twice. By the procedure as in this example, user 
registration can be assumably deleted on a condition of 
an owner authentication similarly to that of user regis- 
tration. 

[0076] By the above procedure, biometrics informa- 
tion is registered together with PINs to the biometrics 
database 1 04 of the automobile 1 . Furthermore, the PIN 
is encrypted and stored in the portable unit 2. 
[0077] Explanation will now made on an entry process 
to release the door lock of the automobile 1 wherein the 
user carries the portable unit 2 in a state the biometrics 
infomnation of Fig. 5 has been completed, with reference 
to a flowchart of Fig. 6. 

[0078] In step S41 , the control section 11 of the auto- 
mobile 1 controls the communicating section 15 to de- 
termine whether or not the portable unit 2 has been de- 
tected within a predetennined range. In the present 
case, because of an entry process, when the user 
comes in a range, e.g., of 1 meter of the automobile 1, 
i.e. the portable unit 2 approaches to a range of within 
1 meter of the automobile 1 , the communicating section 
15 assumably detects the portable unit 2. The control 
section 11 controls the communicating section 15 in a 
similar way until detecting that the user carrying the port- 
able unit 2 has approached to a distance of within 1 me- 
ter from the automobile 1 . For example, when detecting 
an approach to a distance of within 1 meter, the process 
proceeds to step S42- Note that the range the automo- 
bile 1 is to detect the portable unit 2 may not be 1 meter, 
i.e. it may be a distance of about 2 to 5 meters, usually, 
to detect an access of a person walking to an automobile 
and secure a time for unlocking. 

[0079] In step S42, the passive entry authenticating 
section 13 controls the communicating section 15 to 
transmit an inquiry signal for passive entry authentica- 
tion to the portable unit 2. • 

[0080] In step S71 , the control section 31 of the port- 
able unit 2 controls the communicating section to deter- 
mine whether an inquiry signal has been received or not. 
The process is repeated until an Inquiry signal has been 
received. For example, in the case of detemnining a re- 
ception of an inquiry signal by the process of step*S42, 
the process proceeds to step S72. 
[0081] In step S72, the control section 31 reads an 
identification signal 33a and PIN 33b out of the memory 
33, and controls the communicating section 32 to trans- 
mit It to the automobile 1 . Incidentally, when sending a 
PIN 33b, an owner PIN and a user PIN are both trans- 
mitted, it is possible to provide a devising to send selec- 
tively one of them. Speclficalty, rt is possible to consider 
the setting to send only an owner PIN if pressing the 
keyless entry button 121 on the portable unit 2 twice suc- 
cessivefy and to send only a user PIN If pressing It trice 



successively. 

[0082] In step S43, the control section 1 1 controls the 
communicating section 15 to determine whether an 
identification signal and PIN is received from the porta- 
5 ble unit 2 or not. For example, when it is detentiined by 
the process of step 72 that an identification signal 33a 
and PIN 33b is received, the process proceeds to step 
S44. 

[0083] In step S44, the passive entry authenticating 
10 section 13 determines whether the received identifica- 
tion signal 33a is an identification signal 14a previously 
stored in the storage section 14 or not. For example, 
when the received identification signal 33a is (the same 
as) a previously registered identification signal 14a, the 
^5 process proceeds to step S45. 

[0084] . In step S45, the control section 1 1 controls the 
sensor 101 to request biometrics information input or a 
keyless entry ID. Namely, substantially, biometrics infor- 
mation is requested to a user who has registered bio- 
^0 metrics information while pressing the keyless entry but- 
ton 121 is requested to a user who has not registered 
biometrics infonmation. 

[0085] In step S46, the control section 1 1 controls the 
sensor 1 01 to detemnine whether biometrics information 

25 has been inputted or not. For example, in the case that 
. the user carrying the portable unit 2 has inputted bio- 
metrics Information, the process proceeds to step S47. 
[0086] In step S47, the biometric authenticating sec- 
tion 1 03 compares the digitized biometrics information 

30 inputted to the sensor 101 with the biometrtes infomia- 
tion corresponding to the PIN previously registered in 
the biometrics database 1 04. 

[0087] In step S48, the biometrics authenticating sec- 
tion 103 determines whether a comparison result is in 

55 agreement or not, to output a determination result to the 
control section 11 . For example, in the case of a deter- 
mination that the comparison result Is in agreement, the 
process proceeds to step S49 where the control section 
11 controls the lock system 12 to unlock the door lock. 

40 [0088] in the above process, because In step S46 bi- 
ometrics Information Is Inputted and the keyless entry 
button 121 is not pressed, it is determined in step S73 
that the keyless entry button 121 Is not pressed". Thus, 
the process of step S74 is skipped to end the process, 

45 [0089] In the case of a detemninatlon In step S43 that 
an Identification signal 33a and PIN 33b has not been 
received, the control section 1 1 in step S50 determines 
whether a predetenmined time or longer has elapsed or 
not. When a predetemntned time or longer has not been 

so elapsed, the process retums to step S43. When a lapse 
of a predetemriined time or longer is determined, the 
process is ended. Namely, from the fact that an identi- 
fication signal and PIN has not been received, the de- 
tection of within a predetermined range nearby the au- 

55 tomobile 1 is not an authorized portable unit 2, thus end- 
ing the process. 

[0090] In step S44. when the identification signal 33a 
sent from the portable unit 2 is not a previously regls- 
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tared identification signal 14a, the same portable unit 2 
is not a portable unit 2 possessed by an authorized user, 
thus ending the process. 

[0091] In the case of a detemiination in step S46 that 
biometrics information has not been inputted, detenni- 
nation is made in step S51 whether a keyless entry ID 
has been received or not. For example, in case the Icey- 
iess entry button 1 21 of the portable unit 2 is pressed to 
detemiine in step S73 that the Iceyless entry buttoi 1 21 
of the portable unit 2 has been pressed, the control sec- 
tion 31 in step S74 controls the communicating section 
32 to read a keyless entry ID 33c out of the memory 33 
and sent it to the automobile 1 . Because at this time the 
automobile 1 receives the keyless entry ID 33c, in step 
S51 it Is detenmined that the keyless entry ID 33c has 
been received. Thereupon, in step S52the control sec- 
tion 11 controls the lock system 12 to compare between 
the received keyless entry ID 33c and the keyless entry 
ID 1 05a stored in the storage section 1 05, to determine 
in step S53 whether the received keyless entry ID 33c 
agrees with the previously stored keyless entry ID 1 05a. 
In step S53, in the case of a detennination of agreement 
between the both of the keyless entry ID 105a and the 
keyless entry ID 33a, the control section 11 determines 
that the portable unit 2 carried by the user is that pos- 
sessed by an authorized user. Thus, the process pro- 
ceeds to step S49. 

[0092] In the case of a determination, in step S53, of 
a non-agreement between the both of the keyless entry 
ID 1 05a and the keyless entry ID 33a, the portable unit 
2 has not been legitimately registered and considered 
not the one possessed by an authorized user, thus end- 
ing the.process. Namely, the door lock is not released. 
[0093] When it is determined in step S48 that the input 
biometrics information is not the one previously regis- 
tered in the biometrics database 104, the user is con- 
sidered as not an authorized user, ending the process. 
[0094] In the case it is detennined in step S51 that a 
keyless entry ID has not been received, then determi- 
nation is made in step S54 on whether a predetermined 
time or longer has elapsed or not. When determined that 
a predetermined time or longer has not elapsed, the 
process returns to step S46 to repeat the process of 
steps S46, S51 and S54 until elapsing a predetermined 
time. In the case it is determined in step S54 that a pre- 
determined time or longer has elapsed, the user is con- 
sidered not having an intention to input biometrics infor- 
mation nor press the keyless entry button 121 , thus end- 
ing the process. 

[0095] As described above, the lock system 12 un- 
locks the door lock of the automobile 1 on the basis of 
the Identification signal for Identifying the portable unit 
2 possessed by the user and the biometrics information 
of the user. Accordingly, it is impossible to wrongfully 
unlock the door lock even by the use of such a scheme 
as the above-noted relay team attack. Moreover, the au- 
thorized user is allowed to unlock the door lock by a 
mere input operation with simple biometrics information. 



[0096] Furthermore, try case the engine immobilizer 
1 06 controls the engine lock by the similar way. the au- 
tomobile 1 can be prevented more positively from being 
theft by an unauthorized user. 
5 [0097] Herein, explanation will be made on a process 
to unlock the engine lock of the engine immobilizer 1 06, 
with reference to a flowchart of Fig. 7. 
[0098] In step S91 , the control section 1 1 of the auto- 
mobile 1 controls the communicating section 15 to de- 
10 termlne whether the portable unit 2 has been detected 
within a predetemiined range or not. Because the 
present case is on a process to unlock the engine lock 
of the engine immobilizer, it is premised that the user is 
driving in a compartment of the automobile 1 . Further- 
'5 more, he or she is usually sit on or around the driver's 
seat Accordingly, tor example, in the case that the port- 
able unit 2 enters in a range of within 50 cm with respect 
to the steering in the compartment, i.e. when the porta- 
ble unit 2 nears a range of within 50 cm with respect to 

^0 the steering, the communicating section 15 assumably 
detects the portable unit 2. The control section 11 con- 
trols the communicating section 1 5 in a similar way until 
the user carrying the portable unit 2 nears a range of 
within 60 cm from the steering of the automobile 1. For 

^5 example, when detecting a nearing to a point of within 
50 cm from the steering, the process proceeds to step 
S92. Note that the range the automobile 1 is to detect 
the portable unit 2 may not be within 50 cm from the 
steering but may be a distance where to recognize the 

30 user has been aboard the automobile. " 

[0099] In step S92, the passive entry authenticating 
section 13 controls the communicating section 15 to 
transmit an Inquiry signal for passive entry authentica- 
tion to the portable unit 2. 

35 [01 00] In step S1 21 . the control section 31 of the port- 
able unit 2 controls the communicating section to deter- 
mine whether an inquiry signal has been received or not. 
The process is repeated until an inquiry signal has been 
received. For example, in the case the process of step 

40 S92 determines a reception of an inquiry signal, the 
process proceeds to step SI 22. 

[0101] In step SI 22, the control section 31 reads an 
identification signal 33a and PIN 33b out of the memory 
33 and controls the communicating section 32 to trans- 

4s niit It to the automobile 1 . Note that, when sending a PIN 
33b, an owner PIN and a user PIN are both transmitted, 
it is possible to send selectively one of the PINs by a 
scheme as explained in the step S72 of Rg. 6. 
[0102] In step S93. the control section 11 controls the 
communicating section 15 to determine whether an 
identification signal and PIN is received from the porta- 
ble unit 2 or not. For example, when it is determined by 
the process of the step SI 22 that an identifkjation signal 
33a and PIN 33b has been received, the process pro- 

55 ceeds to step S94. 

[0103] In step S94, the passive entry authenticating 
section 13 determines whether the received identifica- 
tion signal 33a is an Identification signal 14a previously 
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stored in the storage section 1 4 or not. For example, 
when ft is determined that the received identification sig- 
nal 33a is (the same as) a previously stored identifica- 
tion signal 14a. the process proceeds to step S95. . 
[0104] In the step S95, the control section 11 controls 
the sensor 1 01 to request a biometrics-information input 
or resting the portable unit 2 on a predetermined posi- 
tion. Namely, biometrics information Is requested to a 
user who has registered biometrics information whereas 
resting the portable unit 2 on a predetermined position 
is requested to a user who has not registered biometrics 
information. 

[0105] In step S96, the control section 11 controls the 
sensor 101 to determine whether biometrics information 
has been inputted or not. For example, in the case that 
the user carrying the portable unit 2 inputs biometrics 
Information, the process proceeds to step S97. 
[01 06] I n step S97, the biometrics authenticating sec- 
tion 103 compares between the digitized biometrics in- 
formation inputted to the sensor 1 01 and the biometrics 
information that an encrypted PIN is decoded and pre- 
viously registered In a biometrics database 1 04 corre- 
sponding to that PIN. 

[0107] In step S98, the biometrics authenticating sec- 
tion 103 determines whether a comparison result is in 
agreement or not, to output a determination result to the 
control section 11 . For example, when the comparison 
result is in agreement, the process proceeds to step S99 
where the control section 11 controls the engine immo- 
bilizer 106 to unlock the engine lock. 
[0108] In the above process, because the step S96 
results in not Inputted with biometrics information or not 
rested with the portable unit 2 in a predetermined posi- 
tion, it is determined in step SI 23 that the portable unit 
2 is not rested in a predetennined position. The process 
of step SI 24 is skipped and the process is ended. 
[0109] In step S93, in the case of a detemninatlon that 
an identification signal 33a and PIN 33b has not been 
received, the control section 1 1 in step SI 00 determines 
whether a predetermined time or longer has elapsed or 
not. When determining a predetermined time or longer 
has not elapsed, the process returns to the step S93 
while when determining a predetermined time or longer 
has elapsed, the process is ended. Namely, from the 
fact that an identification signal and PIN has not been 
receh/ed, the detection of within a predetermined range 
at or around the automobile 1 is not an authorized port- 
able unit 2, thereby ending the process. 
[0110] In step S94, when the identification signal 33a 
sent from the portable unit 2 is not a previously regis- 
tered identification signal 1 4a, it is considered as not the 
portable unit 2 possessed by an authorized user thus 
ending the process. 

[01 11] In step S96. in the case of a determinatk>n that 
biometrics information has not been inputted, it Is deter- 
mined in step SI 01 whether an immobilizer ID has been 
received or not. For example, in the case that the port- 
able unit 2 is rested on a predetermined position to de- 



termine, in step S1 23, the portable unit 2 has been rest- 
ed in a predetermined position, the control section 31 in 
step S124 controls the communicating section 32 to 
transmit the immobilizer ID 33d read out of the memory 

5 33 to the automobile 1 . Whether the portable unit 2 has 
rested on a predetermined position or not may be by a 
configuration having an exclusive tray provided in a 
same form as the portable unit 2 to mechanically or elec- 
trically detect a resting of the portable unit 2 on the tray. 

10 [0112] At this time, because an Immobilizer ID 33d is 
received through the communicating section 15, deter- 
mination is made in step SI 01 that an immobilizer ID 
33d has been received. Furthemiore, in step SI 02, the 
lock system 12 compares between the received immo- 

15 bilizer ID 33d and the Immobilizer ID 107a stored in the 
storage section 107. In step S103, determination is 
made whether the received immobilizer ID 33d agrees 
with the previously stored immobilizer ID 1 07a or not. In 
step S103, when detennining an agreement between 

20 the both of the immobilizer ID 1 05a and the immobilizer 
ID 33a, the control section 11 detennines that the port- 
able unit 2 carried by the user is the one possessed by 
an authorized user. The process proceeds to step S99. 
[0113] In the case of a detennination of non-agree- 

25 ment between the both of the immobilizer ID 107a and 
the immobilizer ID 33a in the step S103, the portable 
unit 2 is not the legitimately registered one and hence 
the user carrying it is considered as not an authorized 
user, thus ending the process. Namely, the engine lock 

30 is not to be released. 

[0114] In step S98, in the case that the input biomet- 
rics information is detemnined as not the one previously 
registered in the biometrics database 1 04, the user is 
considered as not an authorized user, thus ending the 

55 process. 

[0115] In step S101, In the case of a determination 
that an immobilizer ID has not been received, it is de- 
termined in step SI 04 whether a predetermined time or 
longer has elapsed or not. When determined a prede- 
<o termined time or longer has not elapsed, the process 
returns to step 896 to repeat the process of steps S96, 
SI 01 and SI 04 until the predetermined time has 
elapsed. When detemnined the predetennined time has 
elapsed in the step SI 04, the user is considered not hav- 
ing an intention to input biometrics Information nor to 
rest the portable unit 2 on a predetermined position, thus 
ending the process. 

[0116] As described above, the lock system 12 un- 
locks the engine lock of the automobile 1 on the basis 

50 of an identification signal for identifying the portable unit 
2 carried by the user and the biometrics infonnation of 
the user. Should the door lock is wrongfully unlocked, 
the engine lock cannot be structurally unlocked. More- 
over, the authorized user is allowed to unlock the door 

55 lock and engine lock by a simple operation. 

[0t17] According to the above, wrongful authentica- 
tion can be positively prevented by combining an au- 
thentication process to be made t)etween the appara- 
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tuses used In authentication (automobile 1 and portable 
unit 2. in the above embodiment) with an authentication 
process with the biometrics information on an author- 
ized user. 

[011 8] Incidentally, the embodiment so far introduced 5 
mainly the example capable of registering only an owner 
PIN on one person and user PIN on one person. How- 
ever, by increasing the capacity of the memory 33 within 
the portable unit 2, a plurality of user PINs can be reg- 
istered. Also, the biometrics database 104 in the auto- io 
mobile 1 can store user PINs and biometrics information 
(fingerprints, etc.) in the number of persons to be regis- 
tered on the portable unit. Furthemnore, because the 
number of portable units. 2 usable on one automobile 1 
can be increased as required, the biometrics database is 
1 04 may store therein the combinations of a multiplicity 
of user PINs and pieces of biometrics information. In this 
case, in case devising is made to send only a particular 
owner PIN and user PIN to the automobile 1 by properly 
operating the keyless entry button 121 of the portable ■ 20 
unit 2: the time required for authentication (particularly, 
biometrics information matching) can be shortened by 
invoking from the biometrics database 104 only the bi- 
ometrics information corresponding to the PIN transmit- 
ted from the portable unit 2 during an authentication of 2s 
an owner or user. 

[01 1 9] Besides, it is possible to consider an embodi- 
ment that the sensor section 101 has fingerprint-reading 
and biometrics-detecting functions so that owner or user 
authentication can be suspended in case the finger 30 
placed in the sensor section 101 is an "imitation made 
of rubber or the like". 

[0120] Furthermore, although there is available, in 
many hotels, service what is called "valley paricing" that 
an employee drives a car to store it in a predetermined 35 
parking lot, the hotel employee who has not registered 
the fingerprint is not allowed to drive the car mounted 
with the invention. In this respect, the following meas- 
ure, for example, can be taken to temporarily allow the 
employee to drive the car. 40 
[0121] First, a predetennlned numeral (?5963" or the 
like) Is inputted through the ten key 102b In a state the 
mode change switch 102a is in an operation mode, and 
then the fingerprint of a owner or user is read out by the 
sensor section 101. This provides an authorization to 45 
the hotel employee to drive the car for only a constant 
time period (e.g. 1 5 minutes) so that he or she can store 
the car in a parking lot in a constant time. Elapsing the 
constant time, the lock system 1 2 of within the automo- 
bile 1 operates to lock the automobile door so 
[01 22] Although the embodiment so far used the fin- 
gerprint as biometrics Information; it is possible to use 
biometrics infonnation of other than the fingerprint. In 
such a case, where biometrics information employs the 
Image data taken a picture of part or all of a human body, 55 
such as facial front, retina pattern or physiognomy, a 
camera capable of taking a pk:ture of a still or moving 
Image is used in the sensor sectton 101 . Meanwhile, In 



the case of adopting volceprints as biometrics informa- 
tion, the sensor section 101 uses a microphone. 
[0123] The series of processes described in the 
above, although to be executed by hardware, can be 
executed by software. In the case the series of process- 
es are to be executed by software, a program configur- 
ing the. software Is installed from a recording medium 
onto a computer built with an exclusive hardware or, for 
example, onto a general-purpose personal computer 
capable of executing various functions by installing var- 
ious programs. 

[0124] Rgs. 8 and 9 show a configuration of an em- 
bodiment of a personal computer in the case the control 
section of the automobile 1 and the portable unit 2 are 
realized by software. The CPU 501 , 601 of the personal 
computer controls the overall operation of the personal 
computer. Also, the CUP 501 , 601 , when Inputted by an 
instruction from the user through an input section 506, 
606 formed by a keyboard or mouse via a bus 504, 604 
and an input/output interface 505, 6lD5. correspondingly 
executes the program recorded on a ROM (Read Only 
Memory) 502, 602. Othenvise, the CPU 501, 601 exe- 
cutes the program read out of a magnetic disk 51 1 , 611 , 
optical disk 512, 612, magneto-optical disk 513, 613 or 
semiconductor memory 514, 614 connected to a drive 
510, 610 and installed on a storage section 508, 608, 
by being loaded onto a RAM (Random Access Memory) 
503, 603. This realizes the functions of the control sec- 
tion of the automobile 1 and the portable unit 2 by soft- 
ware. Furthemnore, the CPU 501 , 601 controls the com- 
municating section 509. 609 to communicate with the 
outside, thus executing data transmission and recep- 
tion. 

[0125] The recording medium recording a program, 
as shown in Figs. 8 and 9. separately from a computer, 
Is to be configured by a package media of a magnetic 
disk 511, 611 (including a flexible disk), an optical disk 
512, 612 (including CD-ROM (Compact Disk-Read Only 
Memory), a DVD (Digital Versatile Disk)), a magneto- 
optical disk 513. 613 (Including MD (Mini-Disk)) or a 
semiconductor memory 514, 614 recording a program 
to be distributed to the users. Besides, the recording me- 
dium is to be configured by a ROM 502. 602 recording 
a program or a hard disk included in a storage section 
508. 608, to be provided to the users in a state previ- 
ously incorporated in a computer. 
[0126] Incidentally, in the present description, the 
processes, to be executed chronologically in the se- 
quence described in the steps describing the program 
recorded on the recording medium, are not necessarily 
processed In a chronologcal order, of course including 
the processes to be executed in a parallel or individual 
fashion. 

[0127] Meanwhile, in the present description, thesys- 
tem represents an apparatus overall configured with a 
plurality of apparatuses. 



10 

BNSOOCID: <EP 1286297A1_L> 



19 



EP 1 286 297 A1 



20 



Claims 

1 . An authenticating apparatus connprising: 

a receiving section for receiving an identifica- 5 
tion signal of a portable unit transmitted from 
the portable unit through radio communication; 
an identification signal storing section for stor- 
ing one or more of previously registered identi- 
fication signals of portable units; io 
portable-unit authenticating section for com- 
paring a received identification signal with a 
stored identification signal to confirm whether 
the both identification signals are in agreement 
or not; is 
an information input section for inputting bio- 
metrics infomnation; 

an information storing section for storing bio- 
metrics infomnation on one or more of previous- 
ly registered persons; 20 
a person authenticating section for comparing 
input biometrics information with stored biomet- 
rics information to confirm whether the both 
pieces of biometrtes information are in agree- 
ment or not; and 25 
a determining section for determining whether 
authentication results of the portable-unit au- 
thenticating section and the person aiJthenti- 
eating section are respectively authentication 
results in agreement or not. 30 

2. An authenticating apparatus according to claim 1, 
wherein the ihfomriation storing section stores the 
biometrics. information of the previously registered 
person and a unique person identification number 35 
corresponding to the biometrics infonnation, the 
portable unit storing the unique person identification 
number together with the identification signal, the 
receiving section receiving the unique person iden- 
tification number together with the identification sig- 40 
nal through radio communication from the portable 
unit the person authenticating section invoking, 
from the information storing section, biometrics inr 
fonmation corresponding to the unique person iden- 
tification number received by the receiving section 

to compare invoked biometrics information with the 
inputted biometrics infomnation thereby carrying out 
personal authentication. 

3. An authenticating apparatus according to claim 2, so 
wherein the personal identification number is clas- 
sified with a first-kind personal identification number 
representing an owner of the authenticating appa- 
ratus or an appliance incorporating the authentbat- 

ing apparatus and a second personal identification ss 
number representing a user other than the owner, 
further comprising a registration control section for 
controlling the infonnation input section and the in- 



formation storing section in order to register the bi- 
ometrics information and the personal identification 
number, the registration control section confirming 
a previous registration of the first-kind personal 
identification number and the biometrics informa- 
tion with con'espondence and a previous input of 
the bbmetrics information corresponding to the 
first-kind personal identification number from the in- 
formation input section, to thereafter carry oui con- 
trol for registering the second-kind personal identi- 
fication number and the biometrics infomnation with 
con^espondence. 

4. An authenticating apparatus according to claim 3, 
wherein the registration control section, when the 
first-kind personal Identification number and the bi- 
ometrics Infonmation have been registered with cor- 
respondence, carries out control to delete all of the 
already stored second-kind personal identification 
numbers and the biometrics information corre- 
sponding thereto from the infonnation storing sec- 
tion. 

5. A method of authentication comprising the steps of: 

receiving an identification signal of a portable 
unit transmitted from the portable unit through 
radio communication; 

comparing a received identification signal with 
a previously registered identification signal to 
conflmn whether both identification signals are 
In agreement or not thereby carrying out au- 
thentication of the portable unit; 
accepting an input of biometrics information, on 
the other hand; 

comparing inputted biometrics information with 
previously registered biometrics infomnation to 
confirm whether the both pieces of biometrics 
infonnation are in agreement or not thereby 
carrying out authentication of a person; and 
detennining whether an authentication result of 
the portable unit and an authentication result of 
the person are, both, in agreement or not. 

6. Amethod of authentication according to claim 5, 
wherein the previously registered biometrics infor- 
mation is stored together with a unique personal 
identification number corresponding to the biomet- 
rics information, the identification signal and unique 
personal identification number stored within the 
portable unit being received through radio commu- 
nication from the portable unit on the other hand, 
biometric information corresponding to the unique 
personal identification number obtained by the re- 
ception being Invoked in the personal authentica- 
tion and compared with the inputted biometrics in- 
formation thereby carrying out personal authentica- 
tion. 
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7. A method of registering a person to an authenticat- 
ing apparatus or an appliance using an authenticat- 
ing method according to claim 6, wherein the per- 

. sonal identification number is classified with a first- 
kind personal identification number representing an 5 
owner of the authenticating apparatus or appliance 
and a second-kind personal identification number 
representing a user other than the owner, a previ- 
ous registration of the first-kind personal identifica- 
tion number and the biometrics information with cor- io 
respondence and a previous input of the biometrics 
infomriation corresponding to the first-kind personal 
identificatbn number being confimied to thereafter 
register the second-kind personal identification 
number and the biometrics information with corre- ^5 
spondence. 

8. A method of registering a person according to claim 
7, wherein, when the first-kind personal identifca- 

tion number and the biometrics information are reg- 20 - 
istered with correspondence, the already stored 
second-kind personal Identification numbers, and 
the biometrics information corresponding thereto 
are all deleted. 
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FIG. 3 (b) 
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